List Api Keys V1

List the calling tenant’s API keys. The plaintext key and the SHA-256 hash are never returned — only the metadata a caller could need for an audit dashboard…

GET /api/v1/keys

cURL

curl --request GET \
  --url 'https://api.computer.stateset.app/api/v1/keys' \
  --header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY"

200

[
  {
    "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
    "name": "Two-Person Tent",
    "key_prefix": "string",
    "scopes": [
      "string"
    ],
    "rate_limit_per_minute": 8,
    "is_active": true,
    "last_used_at": "2026-08-31T14:22:05Z",
    "expires_at": "2026-08-31T14:22:05Z",
    "created_at": "2026-08-31T14:22:05Z",
    "is_current": false
  }
]

List the calling tenant’s API keys.

The plaintext key and the SHA-256 hash are never returned — only the metadata a caller could need for an audit dashboard (prefix, scopes, last_used_at, etc.). The current request’s key is flagged with is_current: true so callers can self-identify in the list.

Response

APIKeySummary[] — each element:

id · string · required

name · string · required

key_prefix · string · required

First 12 chars of the key (e.g. ‘sk_ss_aBc12’).

scopes · string[] · required

rate_limit_per_minute · integer · required

is_active · boolean · required

last_used_at · string,null

expires_at · string,null

created_at · string · required

is_current · boolean

True for the key making this request (callers can self-identify).

Status codes

Code	Meaning
200	Successful Response

cURL

curl --request GET \
  --url 'https://api.computer.stateset.app/api/v1/keys' \
  --header "X-API-Key: $STATESET_COMPUTER_USE_API_KEY"

200

[
  {
    "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
    "name": "Two-Person Tent",
    "key_prefix": "string",
    "scopes": [
      "string"
    ],
    "rate_limit_per_minute": 8,
    "is_active": true,
    "last_used_at": "2026-08-31T14:22:05Z",
    "expires_at": "2026-08-31T14:22:05Z",
    "created_at": "2026-08-31T14:22:05Z",
    "is_current": false
  }
]